Re: [clamav-users] Hi I haver been using clamav for my linux system I use 12.04Ltd i have a query

2016-12-12 Thread Steven Morgan
On Sat, Dec 10, 2016 at 6:23 PM, Beth Macdougal wrote: > now i am not positive about this whether it is a virus or not but i ran the > > clamscan -r --bell -i / > > and when it finished it said > > LibClamAV Warning: fmap_readpage: pread fail: asked for 4085 bytes @ offset > [...] This warning m

Re: [clamav-users] Question on attachments

2016-12-12 Thread Joel Esler (jesler)
File types are based upon their contents. Not their extensions. -- Joel Esler | Talos: Manager | jes...@cisco.com On Dec 12, 2016, at 11:43 AM, TR Shaw mailto:ts...@oitc.com>> wrote: How does ClamAV decide to unpack an attachment? In particular this is in refere

Re: [clamav-users] Question on attachments

2016-12-12 Thread Steve basford
Hi Tom, .ftm files contain magic headers of various formats. Cat daily.ftm Cat sanesecurity.ftm The engine then unpacks if it's a zip etc and the unpacked exists. That's why your example filename still unpacks. You can also use. ftm to skip file formats from scanning. I'm mobile at the mome

Re: [clamav-users] Question on attachments

2016-12-12 Thread Reindl Harald
Am 12.12.2016 um 17:43 schrieb TR Shaw: How does ClamAV decide to unpack an attachment? In particular this is in reference to the recent Locky attachments that are zips but have the attachment extension “dip” clamav don't care about extensions as any other unix software [harry@rh:/download

[clamav-users] Question on attachments

2016-12-12 Thread TR Shaw
How does ClamAV decide to unpack an attachment? In particular this is in reference to the recent Locky attachments that are zips but have the attachment extension “dip” ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net

Re: [clamav-users] bugzilla security certificate

2016-12-12 Thread Steve Basford
On Wed, December 7, 2016 5:03 pm, Benny Pedersen wrote: >> You can bypass the warning if desired. > > worst advise you ever have giving here Thanks... but I didn't actually say you *should* ... but browsers do allow you too. In this case the firefox error box was: bugs.clamav.net uses an inval